What we collect, and why

When you request an estimate you give us your name, email address, telephone number and the address of the property, along with whatever you tell us about the work you are considering.

If you use the photo-based estimate you also give us the photographs you upload and any measurements you enter.

We ask for this because an exterior estimate is impossible without knowing which exterior. We do not ask for anything we do not need for that.

Your browser is given a random session identifier the first time you use the site. It is not your name and it is not linked to you unless you later submit the estimate form from the same session.

Against that identifier we record which pages you open, and for each one: the address of the site that sent you here (the site's name only, never the full link or anything you searched for), any campaign tags in the link you followed, and whether the screen is phone-, tablet- or desktop-sized.

We also record how the Visualizer is used: when a session starts, which material and colour you pick for the wall and for the gable, when you save a favourite, and when you confirm a design. And we record when you press "Get an Estimate" and when you start filling the form in.

We use this to learn where homeowners come from, which combinations they actually choose, and where the site loses people. It is product research, not advertising.

We do not store your IP address, your browser's user-agent string, or any device fingerprint. The phone/tablet/desktop label comes from your window's width, nothing more.

We do not track you across other websites, we do not use advertising or social media trackers, and we do not buy or receive data about you from anyone else.

We do not record what you type into a form unless you submit it.

If you build a design and then request an estimate in the same session, we keep the link between that design and your request. That is deliberate and it is for your benefit: it means the estimate is for the design you actually chose.

If you never submit the form, the browsing record stays anonymous.

We do not use advertising or analytics cookies. The site keeps your session identifier and your saved Visualizer designs in your own browser's storage — which is not a cookie and is never sent to another company — so your work survives a page refresh. Clearing your browser data clears them.

If you sign in — our staff, and businesses using our website platform — authentication cookies are set to keep you signed in, and for no other purpose. The business platform part of this policy describes them.

Our database and file storage are hosted by Supabase, which stores this information on our behalf. Aerial imagery shown in our internal tools comes from the United States Geological Survey; using it sends no information about you.

We do not sell your information, and we do not share it with advertisers or data brokers.

We may share what is necessary with a subcontractor actually working on your project, and we will disclose information if the law requires it.

Estimate requests are kept while we may still do work for you and afterwards as a business record.

Anonymous Visualizer sessions are kept as research data. Because they are not tied to a person, they are not usually something we can find and delete on request — unless they are linked to an estimate you submitted, in which case we can.

You can ask us for a copy of the information you have given us, ask us to correct it, or ask us to delete it. Use the estimate form and say so in the description, and a person will handle it.

You can use the Visualizer without submitting anything. Clearing your browser storage removes your local session and favourites.

Besides this website, we run a platform that lets businesses create, manage and publish their own websites. This part of the policy explains what we collect when a business uses it, and what we do with it.

A business account can have several people — an owner, and people the owner lets in as editors or viewers. Each person signs in with their own account.

To create an account we need your email address and a password. Your password is handled by our authentication provider; we never see it or store it in readable form.

We keep a record of which business accounts you belong to and in what role, so that each person sees and changes only what they are allowed to.

You tell us about your business: its name, what it does, a description, a phone number and email address, where it operates, its own existing website, its opening hours and the categories it uses on directories. All of these except the name and the kind of business are optional.

We use this information to build your website and to show it back to you in your console. Suggested website text is produced by rules in our own software from what you entered; no outside artificial-intelligence service receives your business information.

Photos you upload are stored privately in your account. Before you can upload one you confirm that you may use it.

We make resized copies for your website. Those copies have location data (such as GPS coordinates recorded by a phone) and other embedded metadata removed; the original stays private in your account.

When you publish, the information and photos you chose to include become public on your website, because that is the point of publishing. You decide what is included, and you can change it and publish again.

Connecting your Google Business Profile is optional. If you choose to connect, Google asks you to allow our platform to manage your business listing (the permission Google calls business.manage). We use that access only to read your listing — we do not change anything on Google.

With your permission we read which business listings your Google account manages, and for the one you choose: its name, description, phone number, address or service area, website, opening hours and categories, and the photos the business itself added. Photos added by your customers are not imported.

Nothing we read is used until you review it. You choose, field by field and photo by photo, what to bring into your profile and media library, and we keep a record of where each imported value came from so that a later import never overwrites a change you made yourself.

The access Google gives us is stored encrypted, on our servers only, and is never sent to your browser. We do not use information from Google for advertising, we do not sell it, and we do not use it for any purpose other than filling in and updating your own business information on our platform.

Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

You can disconnect at any time from the Connected sources page. When you do, we delete our stored access and ask Google to revoke it. You can also remove our access from your Google Account's security settings. Information you already imported stays in your profile until you change or remove it.

Payments for plans are handled by Stripe. Your card details are entered on Stripe's own pages and go directly to Stripe; we never see or store them.

We keep what we need to know which plan you have: Stripe's customer and subscription references, your plan, its status and its current period dates.

When you sign in, cookies are set to keep you signed in. When you connect your Google Business Profile, a short-lived cookie links the start of the connection to its end, so that nobody else can complete it in your name; it expires within minutes.

The platform uses no advertising or analytics cookies.

Access to your business's information is limited to the people in your business account, and our own staff where needed to run and support the service.

Our servers record errors so that we can fix problems; those records do not contain passwords or connection secrets. Our hosting and infrastructure providers keep standard request logs, which can include an IP address and the time of a request, to operate and protect the service.

No system is perfectly secure, and we do not claim otherwise; we take reasonable measures and keep them under review.

Supabase hosts our database, file storage and sign-in on our behalf. Stripe processes payments. Google provides the information you choose to import, if you connect it. Our application runs with a cloud hosting provider.

They process information to provide their service to us. We do not sell your information and we do not share it with advertisers or data brokers. We will disclose information if the law requires it.

We keep your account, business information, photos and website for as long as your account exists. If your plan ends, your website may be paused, but nothing you made is deleted.

When you disconnect a connected source, our stored access to it is deleted immediately. If you ask us to delete your account, we delete it and its business information; copies in routine backups are removed as those backups expire.

You can see and change your business information and photos at any time in your console, disconnect your Google Business Profile at any time, and cancel a paid plan from the plan page.

You can ask us for a copy of your information, or ask us to correct or delete it. Use the contact page and say it is about a business account; a person will handle it.

This website is for homeowners arranging work on a property, and the platform is for businesses. Neither is directed at children, and we do not knowingly collect information from them.

If we start collecting something new, we will change this page before we start — not afterwards. The date at the top of this page is when it last changed.